CI: Move fetch-usn-gh-json task outside of in_parallel

[selzoc]

Followup to #717
It depends on a get of bosh-stemcells-ci in the in_parallel block, so it can't be parallelized with it.

Validated in the pipeline: https://bosh.ci.cloudfoundry.org/teams/stemcell/pipelines/ubuntu-jammy/jobs/process-high-critical-cves/builds/563

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 16a5cfe9-74cf-4dce-a443-3f09625646a0

📥 Commits

Reviewing files that changed from the base of the PR and between b2a97fc and a97f57f.

📒 Files selected for processing (1)

• ci/pipeline-template.yml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

Walkthrough

The pipeline template reorders resource fetches and the fetch-usn-gh-json task in the high/critical, package-availability, and low/medium USN jobs. Required resources are fetched before the task runs.

Suggested reviewers: aramprice

Merge Risk: ⚪ Minimal · up to a97f5

This change moves the dependent CI task out of parallel execution to preserve its required ordering. No actionable merge-blocking risk remains after normal checks and review.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly describes the primary change: moving the fetch-usn-gh-json task outside the in_parallel block.
Description check	✅ Passed	The description explains the dependency that requires the task to move and provides pipeline validation evidence. It does not state the merge-forward branch details or AI review feedback status, but t…
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

Full details: Description check

Explanation

The description explains the dependency that requires the task to move and provides pipeline validation evidence. It does not state the merge-forward branch details or AI review feedback status, but these omissions are non-critical.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fixup-fetch-usn-gh-json

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[KauzClay]

dang, the in parallel bit woulda been nice